This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft File: 4rHi5MUIxsepi2WYUodFyBP60x0.mft (raw, json) Hash identifier: 6ulUwFxqKyZZ8BkI5xGlW1k8/hxo3rWxsnWiOulfyoc= Subject key identifier: 96:83:DA:DD:B7:AA:1E:2D:07:92:1F:E1:1B:5B:37:9C:E0:03:CB:52 Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D Certificate issuer: /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d Certificate serial: 019B315661DD0194E66EBF4AB6EDCFE6696C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft Manifest number: 1787 Signing time: Thu 18 Dec 2025 12:01:43 +0000 Manifest this update: Thu 18 Dec 2025 12:01:43 +0000 Manifest next update: Fri 19 Dec 2025 12:01:43 +0000 Files and hashes: 1: 4rHi5MUIxsepi2WYUodFyBP60x0.crl (hash: hKbzmcLQjjoQVcDu0cdSpGVw0e95oXne7mUZgdX9LWs=) 2: 883carP1hhWb3_MmiKGn80hphf0.roa (hash: cPZWjDagkqb5tEO5wfwI807e/U08AzhpwxGlaqpcxgI=) 3: AnftS6a3tNRTfwARV2obSQtU-1Q.roa (hash: 1O5FkUYkHZKrQKTSneyG+jslWvu7oIHqq1i+yTKMvxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:61:dd:01:94:e6:6e:bf:4a:b6:ed:cf:e6:69:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d Validity Not Before: Dec 18 12:01:43 2025 GMT Not After : Dec 19 12:01:43 2025 GMT Subject: CN=9683daddb7aa1e2d07921fe11b5b379ce003cb52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e7:06:e3:c4:de:4b:53:ac:41:fb:fb:8f:20: 68:3f:6b:7b:6d:f1:d6:47:5c:75:4c:05:9f:d3:b6: 22:37:f0:5f:5f:4b:fe:76:69:45:c2:6d:ca:69:86: 0c:31:29:23:cd:d9:88:0b:8c:78:fa:a1:30:ca:1f: 15:0d:c6:c0:85:ae:10:bd:b7:66:0e:f5:9f:ac:95: 45:c9:8f:fb:b5:f6:01:cd:88:29:b0:ca:b6:28:f3: be:9b:62:79:42:50:b1:59:a6:b5:76:78:69:70:2d: be:e8:02:bd:af:51:a9:49:4f:df:d5:8f:a0:51:b5: 18:9a:75:01:99:2f:6a:03:84:aa:5b:0e:66:0a:7b: 87:19:12:1b:cc:e6:d5:0b:38:84:11:a5:59:de:52: 87:ad:5f:eb:6b:97:0d:51:10:7f:9e:85:76:90:ac: c9:39:af:25:e6:25:53:25:87:59:ba:e6:b3:f4:77: c4:53:b8:43:4f:a8:1b:9d:43:15:49:22:7e:4a:37: dc:a8:f1:1a:d2:43:49:0c:37:40:11:da:fd:13:74: 7e:18:01:0f:67:45:0f:21:8d:aa:06:29:f3:47:d1: 4d:6b:16:43:95:dd:c8:3f:68:cf:90:c5:e4:30:c7: 04:1d:02:95:e1:6b:5b:52:d9:ba:4c:4a:b0:f4:64: c2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:83:DA:DD:B7:AA:1E:2D:07:92:1F:E1:1B:5B:37:9C:E0:03:CB:52 X509v3 Authority Key Identifier: keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:db:92:2e:5e:97:97:e9:c3:7a:b8:f9:58:99:2b:bf:04:a7: fb:f6:a1:65:c3:5a:13:81:a8:97:78:fb:e8:5c:57:1f:44:ae: 5f:7a:c7:93:b1:3d:b4:13:ff:ad:62:f4:ff:b4:6e:db:5b:ff: fd:a9:91:55:a5:f8:64:08:f0:7d:a9:c4:21:d3:fd:f1:ca:a1: 9b:70:e9:f1:49:a8:9d:75:f3:37:1a:f2:3a:89:00:24:46:30: 42:70:38:81:04:f5:27:c5:14:e1:a1:e1:a2:46:75:64:3a:ab: b1:85:1d:a9:4b:36:fa:76:16:b3:6e:51:3e:a8:99:e6:8e:c8: ba:a4:03:c0:bc:5b:7e:26:f1:85:06:e3:8b:5f:d9:e2:f7:6d: bd:84:10:ef:f6:2d:91:c8:f9:21:68:b9:2e:8b:db:21:e2:ad: 0c:2d:93:34:03:6c:a3:a9:f3:a2:bd:13:fb:0c:b2:84:22:7a: 59:d1:b7:3a:b4:9a:14:d4:e8:66:90:ef:b1:ba:f8:d9:73:41: 20:b1:a9:f1:3e:28:50:97:14:14:a7:38:95:68:04:bb:ee:5a: bc:da:a5:db:ae:81:e7:d1:b0:30:b4:41:64:cc:ca:83:42:e2: 0e:6b:ff:1d:fa:2b:3d:8d:89:76:8a:aa:28:6c:43:e5:91:3e: 65:0e:83:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVmHdAZTmbr9Ktu3P5mlsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYjFlMmU0YzUwOGM2YzdhOThiNjU5ODUyODc0NWM4MTNm YWQzMWQwHhcNMjUxMjE4MTIwMTQzWhcNMjUxMjE5MTIwMTQzWjAzMTEwLwYDVQQD Eyg5NjgzZGFkZGI3YWExZTJkMDc5MjFmZTExYjViMzc5Y2UwMDNjYjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ucG48TeS1OsQfv7jyBoP2t7bfHW R1x1TAWf07YiN/BfX0v+dmlFwm3KaYYMMSkjzdmIC4x4+qEwyh8VDcbAha4Qvbdm DvWfrJVFyY/7tfYBzYgpsMq2KPO+m2J5QlCxWaa1dnhpcC2+6AK9r1GpSU/f1Y+g UbUYmnUBmS9qA4SqWw5mCnuHGRIbzObVCziEEaVZ3lKHrV/ra5cNURB/noV2kKzJ Oa8l5iVTJYdZuuaz9HfEU7hDT6gbnUMVSSJ+SjfcqPEa0kNJDDdAEdr9E3R+GAEP Z0UPIY2qBinzR9FNaxZDld3IP2jPkMXkMMcEHQKV4WtbUtm6TEqw9GTCcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJaD2t23qh4tB5If4RtbN5zgA8tSMB8GA1UdIwQY MBaAFOKx4uTFCMbHqYtlmFKHRcgT+tMdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHJIaTVNVUl4c2VwaTJXWVVvZEZ5QlA2MHgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kMzFlNWYtMGY1Mi00NjIzLTg2N2Et NTQzZDYxODJlMjk0LzEvNHJIaTVNVUl4c2VwaTJXWVVvZEZ5QlA2MHgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9kMzFlNWYtMGY1Mi00NjIzLTg2N2EtNTQzZDYxODJlMjk0 LzEvNHJIaTVNVUl4c2VwaTJXWVVvZEZ5QlA2MHgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuduSLl6X l+nDerj5WJkrvwSn+/ahZcNaE4Gol3j76FxXH0SuX3rHk7E9tBP/rWL0/7Ru21v/ /amRVaX4ZAjwfanEIdP98cqhm3Dp8UmonXXzNxryOokAJEYwQnA4gQT1J8UU4aHh okZ1ZDqrsYUdqUs2+nYWs25RPqiZ5o7IuqQDwLxbfibxhQbji1/Z4vdtvYQQ7/Yt kcj5IWi5LovbIeKtDC2TNANso6nzor0T+wyyhCJ6WdG3OrSaFNToZpDvsbr42XNB ILGp8T4oUJcUFKc4lWgEu+5avNql266B59GwMLRBZMzKg0LiDmv/HforPY2Jdoqq KGxD5ZE+ZQ6DiQ== -----END CERTIFICATE-----Generated at Thu Dec 18 16:18:12 2025 by rpki-client